Bartu K. Email and Phone Number

- Automating SOC Processes and integrating them with rich resources.- Developing and leading projects that improve processes and combine innovative approaches.- Developing use-cases for Mitre Att&ck and NIST Frameworks, CTI sources and current attack scenarios.- Mapping the custom created rules for Mitre Att&ck framework.- Tuning the alerts to reduce the efforts of the monitoring teams.- Creating hunting queries to attack scenarios and case study reports used by attacker groups.- Designing SOAR playbooks to reduce effort and enhance incident response times.- Informing customers about alert counts, completed improvements and the status of the improvements through monthly or weekly presentations.- Implementing rule adjustments or creating reports based on the customer's demands.- Advising customers to harden their defense products.

- Conduct threat hunting on platforms like SOCRadar, Virus Total, Hybrid Analysis, and others for threat research and tracking.- Investigate adversary campaigns and malicious infrastructures, documenting findings.- Analyze malware and adversary tools using sandboxes and reverse engineering.- Identify threat intelligence sources and create tools/scripts to track threat actors across the Clear, Dark, and Deep Web.- Produce high-quality reports and articles with detection and mitigation guidance.- Collaborate with teams to improve the SOCRadar platform iteratively.

Incident Response & DevSecOps & Team Lead- Automation of security controls- Incident Response & Management- Control and management of security operations- Security products automation and integration- Threat Hunting, Threat Analysis, Forensic Analysis- Security procedures & playbooks

- Access Management: PAM products (CyberArk)- Endpoint security: AntiVirus, DLP and host compliance- Network security: IPS/IDS, traditional 5 tuple firewalls, next-gen firewalls, cloud security group- Logging and monitoring: SIEM and Cloud Access Security Broker (CASB)- Data Protection: encryption/decryption, HSM, KMS, DLP- DDoS Protection- Management of Security Products- Endpoint Security Tests

TIER 1 & TIER 2- Incident Response,- Incident Handling,- Rule Tuning,- Malware Analysis (dynamic, static),- Threat Hunting,- Threat Intelligence,- Scripting